main_icn_My_Vodafone main_icn_Search main_icn_Chevron_right main_icn_Chevron_down main_icn_Close main_icn_Menu social-facebook social-google-plus social-linkedin social-twitter social-youtube main_icn_Community_or_Foundation main_icn_Location main_icn_Network_signal
Menu Toggle

Welcome to Vodafone Community

Pay as you go

Major security flaw in voicemail

2: Seeker

I have discovered a major security problem with my voicemail.

 

I called 121 to listen to a new voicemail message. I entered my PIN incorrectly and got the message telling me this was the case, which is how it's supposed to work. So I hung up, and went to find my PIN, which I had written down.


When I called 121 again in order to enter the PIN correctly, voicemail simply took me straight to my messages, and did not ask for the PIN!

 

I must reitterate: I did not at any point enter the correct PIN, and yet I was able to listen to my messages

View more options
6 REPLIES
17: Community Champion

Are you normally asked for your PIN when you call 121?

I have my voicemail set to the lower level of security, so that I can call 121 from my own phone (when in the UK) without giving my PIN, but have to give both my number and the PIN if I call 07836 121121 from another device, or call 121 from abroad.

It might be wise to check which level of security you have set up - see https://support.vodafone.co.uk/Using-our-network/Voicemail/ particularly the section on setting up a security PIN - and change the level if you prefer, then re-check that things are behaving as they should. If you use the higher level of security, but weren't asked for your PIN, it's certainly rather worrying.

View more options
2: Seeker

"Are you normally asked for your PIN when you call 121?"

 

Yes

View more options
17: Community Champion

Hmm, that doesn't sound good.

I'd suggest trying to reset your voicemail - start by dialling ##002# [SEND] into your phone. You should see an onscreen message stating that call forwarding has been switched off. Give it an hour or so, switch voicemail back on by dialling 1211, then check it out again.

If it's still playing up, I'd suggest using Live Chat via the link here, and asking them to sort out a voicemail reset or reactivation for you.

View more options
2: Seeker

I've tried to replicate the problem but it seems to be working correctly now. My worry would be that if this isn't fixed it could become a known exploit for Vodafone voicemail.

View more options
17: Community Champion

@ZIncy

Yes, it is worrying, but I'd hope that it was a temporary glitch of some sort. From your description, it was something that would require someone else to get hold of your phone in order to listen to your messages, which at least is better than being able to access your messages from another device, but clearly, if you sometimes get confidential messages, you want them to stay that way.

Can you give an approximate time when this happened? Vodafone's Team read all the posts on the forum, so they should be able to check whether there was a known problem of any sort at that time. Otherwise, I'd expect that someone from the Team will be in touch on this thread, to check that all in is good order with your account.

View more options
Moderator

@ZIncy Thanks for letting us know that all seems to be working fine with your voicemail settings.

If you'd like us to take a look into this further for you, please follow the details provided in the private message I've sent to you. 

Our team will then be in touch.

View more options